ECS639U 6.2 XSS
26/10/2020
Results
A hacker attack will often be followed by a "log injections" so as to disguise the attack.
An XSS attack takes place when malicious injected JavaScript code is sent to other users.
You should always validate a user input on the browser in order to prevent XSS.
It is important to sanitise not only input coming from web forms, but also from the app's DB.
The characters <, >, ', '' and & are called HTML...
In most browser it's possible to run JavaScript from the address bar.
